[PATCH] su: support denying accounts with blank password

Rich Felker dalias at libc.org
Thu Oct 1 22:29:25 UTC 2015


On Thu, Oct 01, 2015 at 03:42:40PM -0300, Alain Mouette wrote:
> Why would you want to completely disable root login?
> 
> If it is a security feature, how can it be used? It can be
> interesting to avoid escalating priviledges, but then how to to
> administrative tasks? (assuming ssh root login is disabled too)

Requiring pubkey-based ssh login is the canonical best-practices way.

Rich


More information about the busybox mailing list